MIM / PAM 2016 SP1 - Child Domain

Hello Experts,

Can anyone advise if Microsoft PAM 2016 SP1 works with child domains? 

We have PAM (Bastion Forest) deployed in the environment which works well with root forest but it looks that privileged permissions are not syncing up in child forest. Users are getting messages that they do not have enough permission in the child domain. 

We already have added the child domain in the root trust for PAM. 

Thanks!